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Abstract — Backoff  misbehavior,  in  which  a  wireless  node  deliberately  manipulates  its  backoff  time,  can  induce  significant  network 
problems,  such  as  severe  unfairness  and  denial-of-service.  Although  great  progress  has  been  made  towards  the  design  of 
countermeasures  to  backoff  misbehavior,  little  attention  has  been  focused  on  quantifying  the  gain  of  backoff  misbehaviors.  In  this  paper, 
to  assess  the  gain  that  misbehaving  nodes  can  obtain,  we  define  and  study  two  general  classes  of  backoff  misbehavior:  continuous 
misbehavior,  which  keeps  manipulating  the  backoff  time  unless  it  is  disabled  by  countermeasures,  and  intermittent  misbehavior, 
which  tends  to  evade  the  detection  of  countermeasures  by  performing  misbehavior  sporadically.  Our  approach  is  to  introduce  a  new 
performance  metric,  namely  order  gain,  to  characterize  the  performance  benefits  of  misbehaving  nodes  in  comparison  to  legitimate 
nodes  in  CSMA/CA-based  wireless  networks.  We  derive  the  order  gains  of  both  continuous  and  intermittent  misbehaviors  and  further 
investigate  the  relation  between  our  metric,  order  gain,  and  the  throughput  gain  for  a  misbehaving  node.  We  show  that  in  IEEE  802.1 1 
networks,  the  throughput  ratio  of  a  backoff  misbehaving  node  to  a  legitimate  node  is  either  bounded  above  or  proportional  to  the 
number  of  legitimate  nodes.  We  use  both  simulations  and  experiments  to  validate  our  theoretical  analysis  and  to  further  demonstrate 
the  impact  of  a  wide  range  of  backoff  misbehaviors  on  network  performance  in  CSMA/CA-based  wireless  networks. 

Index  Terms — CSMA/CA,  random  backoff,  misbehaving  nodes,  performance  gain,  wireless  networks. 
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1  INTRODUCTION 

HE  carrier-sense  multiple-access  with  collision 
avoidance  (CSMA/CA)  protocol,  which  is  widely 
used  in  wireless  networks  such  as  IEEE  802.11  and 
IEEE  802.15,  relies  on  a  distributed  backoff  mechanism 
for  efficient  use  of  the  shared  channel.  However,  backoff 
misbehavior  [1],  which  manipulates  the  backoff  time  at 
the  medium  access  control  (MAC)  layer,  is  one  of  the 
easiest  ways  to  obtain  network  resources  at  the  cost  of 
performance  degradation  [1]  or  even  denial-of-service 
of  legitimate  nodes  [2].  Hence,  many  works  have  been 
done  to  provide  countermeasures  to  backoff  misbehavior 
[1],  [3]— [8]  based  on  a  variety  of  misbehavior  models. 
However,  the  behavior  of  a  misbehaving  node  could 
be  unpredictable  in  a  wireless  network.  A  misbehaving 
node  can  perform  any  type  of  misbehavior  as  long  as  it 
achieves  sufficient  benefits,  which  poses  a  challenging 
problem  to  the  design  of  countermeasures.  A  recent 
work  [9]  indicates  that  it  is  not  practical  to  design  an 
omnipotent  method  to  counter-attack  all  possible  mis¬ 
behaviors  and  further  points  out  that  countermeasures 
should  focus  on  the  misbehaving  nodes  with  significant 
gains  and  at  the  same  time  neglect  the  misbehaving 
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nodes  with  only  marginal  gains  to  save  resources  such 
as  energy  and  bandwidth.  Therefore,  quantifying  the 
performance  gain  of  backoff  misbehavior  becomes  a 
prerequisite  to  the  design  of  countermeasures  to  backoff 
misbehavior. 

To  this  end,  a  gain  factor  is  proposed  in  [9]  to  indicate 
the  impact  of  misbehavior.  However,  the  gain  factor  is 
limited  since  it  is  assumed  that  there  exists  only  one  mis¬ 
behaving  node  in  the  network  and  the  backoff  process  of 
legitimate  nodes  is  simplified  to  uniform  backoff,  which 
is  inconsistent  with  the  widely-used  binary  exponential 
backoff  in  CSMA/CA  networks.  Thus,  a  fundamental 
question  remains  unsolved:  how  to  quantify  the  gain  of 
backoff  misbehavior  in  CSMA/CA-based  wireless  networks? 

In  this  paper,  we  address  the  problem  of  quantifying 
the  gain  of  backoff  misbehavior.  Our  methodology  is  to 
study  the  gain  that  a  misbehaving  node  can  obtain  via 
two  general  classes  of  backoff  misbehavior.  The  first  class 
is  called  continuous  misbehavior,  which  performs  misbe¬ 
havior  persistently  and  does  not  stop  until  it  is  disabled 
by  countermeasures,  as  shown  in  Fig.  1  (a).  Specially,  we 
consider  two  extensively-adopted  models  of  continuous 
misbehavior  [1],  [4],  [7],  [8]:  1)  double-window  backoff 
misbehavior,  which  conforms  to  the  exponential  backoff 
that  is  used  by  legitimate  nodes,  but  has  a  smaller 
average  backoff  time  than  legitimate  nodes.  For  example, 
the  work  in  [4]  defined  the  misbehavior  model  as  double¬ 
window  misbehavior  and  proposed  a  sequential  hypoth¬ 
esis  testing  algorithm  to  detect  the  misbehavior;  2)  fixed- 
window  backoff  misbehavior,  which  chooses  the  random 
backoff  time  uniformly  in  a  given  range.  For  example, 
the  work  in  [7]  considered  fixed-window  misbehavior  as 
the  easiest  model  for  misbehaving  nodes  and  designed 
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continuous  time 


intermittent  time 

Fig.  1.  Comparison  between  continuous  backoff  misbe¬ 
havior  and  intermittent  backoff  misbehavior. 

an  incentive-based  protocol  to  discourage  fixed-window 
misbehaving  nodes  and  to  motivate  all  nodes  to  achieve 
a  Nash  equilibrium. 

The  second  class  is  called  intermittent  misbehavior, 
which  in  contrast  to  continuous  misbehavior,  performs 
misbehavior  in  on  periods  and  returns  to  behaving  le¬ 
gitimately  in  off  periods,  as  shown  in  Fig.  1  (b).  The 
goal  of  intermittent  misbehavior  is  to  obtain  benefits 
over  legitimate  nodes  and  at  the  same  time  to  evade 
misbehavior  detection.  Although  existing  literature  has 
mainly  dealt  with  continuous  misbehavior  and  focused 
little  attention  on  intermittent  misbehavior,  the  work 
in  [5]  has  indicated  that  an  intermittently  misbehaving 
node  may  evade  the  detection  of  misbehavior  detectors 
if  the  on  period  in  which  it  performs  misbehavior  is 
smaller  than  the  monitoring  period  of  misbehavior  de¬ 
tectors.  However,  the  gain  of  intermittent  misbehavior, 
especially  the  impact  of  intermittent  misbehavior  on  a 
wireless  network  remains  unknown  yet. 

We  consider  the  two  classes  of  backoff  misbehavior 
in  slotted  CSMA/CA-based  wireless  networks,  in  which 
the  time  is  measured  by  the  number  of  idle  slots1.  In 
order  to  quantify  the  gain  of  backoff  misbehavior,  we 
introduce  a  new  performance  metric,  namely  order  gain 
G(t),  as  a  function  of  waiting  time  t  that  denotes  the 
number  of  idle  slots  during  the  period  that  a  node 
contends  for  the  channel.  Then,  we  use  the  metric  of 
order  gain  to  analyze  the  benefits  of  the  two  classes  of 
backoff  misbehavior  and  further  evaluate  their  impacts 
via  simulations  and  experiments.  Our  contributions  are 
three-fold. 

1)  A  new  metric,  order  gain,  is  defined  to  measure  the 
performance  benefits  of  misbehaving  nodes  over 
legitimate  nodes,  which  is  helpful  in  evaluating 
the  gain  and  impact  of  a  misbehaving  node  in  a 
CSMA/CA-based  wireless  network. 

2)  We  validate  the  impact  of  backoff  misbehavior 
via  simulations  and  experiments.  We  find  that  the 
number  of  users  is  a  critical  factor  to  the  evaluation 
of  countermeasures  to  backoff  misbehaviors.  Our 
analytical  and  experimental  results  show  that  both 
double-window  and  fixed-window  backoff  misbehav¬ 
iors  can  achieve  significant  gains  when  the  number 
of  users  is  small.  Compared  with  fixed-window  back- 

1.  The  length  of  an  idle  slot  varies  upon  different  standards.  For 
example,  the  durations  of  an  idle  slot  is  20/xs  in  IEEE  802.11b  for 
direct  sequence  spread  spectrum  (DSSS),  and  is  9 /is  in  IEEE  802. llg 
for  orthogonal  frequency-division  multiplexing  (OFDM)  with  20MHz 
channel  spacing. 


off  misbehavior,  double-window  backoff  misbehavior 
only  leads  to  negligible  damage  to  a  network  with 
a  large  number  of  users.  We  also  show  that  an 
intermittently  misbehaving  node  can  not  achieve 
substantial  gains  when  it  only  has  a  short  on  period. 

3)  Besides  quantification  of  existing  backoff  misbe¬ 
havior  models,  we  further  show  that  backoff  mis¬ 
behaviors  in  IEEE  802.11  networks  can  be  catego¬ 
rized  into  two  classes:  finite-gain  misbehavior  and 
scalable-gain  misbehavior,  in  terms  of  the  through¬ 
put  gain  ratio  that  is  the  ratio  of  the  throughput  of 
a  misbehaving  node  to  that  of  a  legitimate  node. 
A  finite-gain  misbehaving  node  always  has  upper- 
bounded  throughput  gain  ratio;  while  a  scalable- 
gain  misbehaving  node  has  throughput  gain  ratio 
proportional  to  the  number  of  legitimate  nodes 
in  a  network,  which  indicates  that  scalable-gain 
misbehaving  nodes  are  much  more  harmful  than 
finite-gain  misbehaving  nodes  in  large-scale  net¬ 
works.  In  lights  of  analytical  studies,  simulations 
and  experiments,  we  suggest  that  countermeasures  to 
backoff  misbehavior  should  focus  primarily  on  scalable- 
gain  misbehavior. 

The  rest  of  this  paper  is  organized  as  follows.  In 
Section  2,  we  introduce  preliminaries  and  formulate  the 
problem  of  quantifying  the  gain  of  backoff  misbehavior. 
In  Sections  3,  we  present  our  main  results  of  the  order 
gains  for  misbehaving  nodes  via  analytical  modeling 
and  simulations.  In  Section  4,  we  show  the  throughput 
gains  of  misbehaving  nodes  in  IEEE  802.11  networks  and 
further  categorize  backoff  misbehavior  in  terms  of  the 
throughput  gain.  In  Section  5,  we  present  experimental 
results  to  show  the  impact  of  misbehaving  nodes  on  a 
practical  WiFi  network.  Finally,  we  conclude  in  Section  6. 

2  Preliminaries  and  Problem  Statement 

In  this  section,  we  first  introduce  the  models  of  back¬ 
off  misbehavior  in  CSMA/ CA-based  wireless  networks, 
then  define  the  order  gain  of  backoff  misbehaviors  for 
later  analysis. 

2.1  CSMA/CA  Backoff  and  Misbehaviors 

In  wireless  networks,  CSMA/CA  features  a  distributed 
control  algorithm  for  resolving  packets  collisions  due  to 
contending  a  shared  channel  by  uncoordinated  users. 
A  widely-used  collision  resolution  algorithm  is  binary 
exponential  backoff,  which  has  been  adopted  in  many 
standards,  such  as  Ethernet  and  802.11  distributed  coor¬ 
dination  function  (DCF).  In  binary  exponential  backoff,  a 
node  which  has  packets  ready  to  transmit  keeps  sensing 
the  channel  until  the  channel  is  idle  and  then  generates  a 
random  backoff  time  uniformly  from  [0,  w  —  1],  where  w 
is  called  the  contention  window.  At  first  w  is  set  to  be  w0, 
which  is  called  the  minimum  contention  window 2,  and  is 

2.  The  minimum  contention  window  is  the  initial  value  of  the 
contention  window.  For  example,  the  minimum  contention  window 
is  32  in  IEEE  802.11b  for  DSSS,  and  is  16  in  IEEE  802.11g  for  OFDM. 
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doubled  after  each  collision.  According  to  this  procedure, 
we  formally  define  legitimate  CSMA/CA  backoff  as 
follows. 

Definition  1  (Legitimate  binary  exponential  backoff):  The 
legitimate  CSMA/CA  backoff  scheme  B  is  defined  as 
the  backoff  mechanism  in  which  the  random  backoff 
time  T(i)  is  chosen  uniformly  from  [0, 2lwo  —  1]  after 
the  i-th  collision  of  a  packet,  where  wo  is  the  minimum 
contention  window. 

Remark  1:  Note  that  in  practice,  there  are  upper  limits 
for  the  contention  window  as  well  as  the  number  of 
retransmissions  (e.g.,  1024  and  7  in  IEEE  802.11,  respec¬ 
tively).  In  this  paper,  we  assume  in  our  theoretical  model 
that  there  are  no  upper  limits  on  both  the  number  of 
retransmissions  and  the  contention  window  to  facilitate 
our  subsequent  analysis.  In  other  words,  we  adopt  an 
asymptotic  approach  to  analyze  the  gain  of  backoff  mis¬ 
behavior  in  CSMA/ CA  networks.  We  will  investigate  the 
effects  of  the  two  limits  via  simulations  and  experiments 
in  Section  5.3. 

Legitimate  CSMA/CA  backoff  attempts  to  coordinate 
all  nodes  to  efficiently  share  the  same  channel  by  as¬ 
signing  a  node  a  longer  backoff  time  with  a  higher 
probability  after  each  collision,  which  in  turn  reduces 
the  chance  of  the  node  to  access  the  channel.  Therefore, 
if  one  node  intends  to  acquire  the  channel  with  a  higher 
chance  regardless  of  the  others,  the  easiest  solution  is 
to  reduce  its  backoff  time,  which  is  referred  to  as  back¬ 
off  misbehavior  [1].  Note  that  CSMA/CA  suffers  several 
other  fairness  problems.  For  example,  the  near-far  effect 
due  to  physical  diversity  in  wireless  LANs  [10]  results  in 
a  node  with  a  better  channel  condition  having  a  higher 
chance  to  access  the  channel.  In  this  paper,  we  assume 
that  the  unfairness  in  a  wireless  network  is  caused  only 
by  backoff  misbehavior.  It  is  also  worth  noting  that  the 
backoff  behavior  of  several  practical  network  cards  has 
been  shown  to  have  some  degree  of  violation  of  standard 
specifications  [11],  but  we  assume  that  all  legitimate 
nodes  use  the  same  backoff  scheme  in  Definition  1. 
The  objective  of  a  backoff  misbehaving  node  is  to  gain 
unfair  access  to  the  channel  by  manipulating  its  backoff 
time  at  the  cost  of  performance  deterioration  of  legiti¬ 
mate  nodes.  Therefore,  backoff  misbehaviors  have  been 
studied  extensively  because  of  their  easy  operation  and 
potential  catastrophic  impact  on  network  performance. 

In  the  following,  we  describe  two  widely-studied 
backoff  misbehavior  schemes  in  the  literature:  double¬ 
window  backoff  misbehavior  and  fixed-window  backoff 
misbehavior.  In  double-window  backoff  misbehavior,  as 
shown  in  the  solid  line  of  Fig.  2,  a  misbehaving  node 
conforms  to  the  binary  exponential  backoff,  but  uses 
a  smaller  minimum  contention  window  than  wq.  For 
example,  double-window  backoff  misbehavior  was  con¬ 
sidered  in  both  [1]  and  [12]  as  the  backoff  misbehavior 
model  and  was  shown  to  achieve  substantial  perfor¬ 
mance  gains  over  legitimate  nodes.  Thus,  we  can  see 
from  Fig.  2  that  compared  to  the  legitimate  backoff 
scheme,  which  is  shown  as  dashed  lines,  a  double-window 


Fig.  2.  Comparison  between  legitimate  backoff,  double¬ 
window  misbehaving  backoff  and  fixed-window  misbehav¬ 
ing  backoff. 

misbehaving  node  always  has  a  higher  chance  to  access 
the  channel  after  each  collision.  For  fixed-window  backoff 
misbehavior  which  is  shown  by  dotted  solid  lines  in 
Fig.  2,  a  misbehaving  node  never  increases  its  contention 
window  and  always  chooses  backoff  time  uniformly 
from  a  fixed  interval.  Thus,  it  has  a  much  higher  chance 
to  access  the  channel  than  legitimate  nodes.  Formally, 
we  have  the  definitions  for  these  two  types  of  backoff 
misbehavior  as  follows: 

Definition  2  (Double-window  backoff  misbehavior):  A 
double-window  misbehaving  node  uses  backoff  scheme 
Bd  in  which  the  random  backoff  time  TD(i)  is  chosen 
uniformly  from  [0,  2lwD  — 1]  after  the  i- th  collision,  where 

wD  <  w0. 

Definition  3  (Fixed-window  backoff  misbehavior):  A 
fixed-window  misbehaving  node  uses  backoff  scheme 
Bf  in  which  the  random  backoff  time  TF(i)  is  chosen 
uniformly  from  [0,u>F— 1]  after  the  i-th  collision,  where 

WF  <  Wo. 

Remark  2:  Both  double-window  and  fixed-window  back¬ 
off  misbehaviors  share  a  common  feature;  that  is,  once 
they  start  to  misbehave,  they  never  stop  unless  they  are 
disabled  by  countermeasures.  Thus,  we  refer  them  also 
continuous  misbehavior  because  such  misbehaving  nodes 
constantly  manipulate  their  backoff  time  to  obtain  unfair 
access  to  the  channel. 

It  is  worthy  of  note  that  a  misbehaving  node  may 
not  perform  a  particular  backoff  scheme  all  the  time. 
For  example,  it  is  implied  in  [5]  that  a  misbehaving 
node  may  evade  misbehavior  detection  if  it  frequently 
changes  backoff  schemes.  This  type  of  misbehavior  can 
be  characterized  as  intermittent  misbehavior,  which  per¬ 
forms  misbehavior  sporadically.  Therefore,  in  this  study, 
we  further  consider  such  type  of  misbehavior  in  order  to 
thoroughly  understand  the  impact  of  misbehaving  nodes 
in  CSMA/CA-based  wireless  networks. 

In  order  to  evade  misbehavior  detection,  an  inter¬ 
mittently  misbehaving  node  only  performs  misbehavior 
in  the  on  state  and  returns  to  legitimate  behavior  in 
the  off  state.  Therefore,  it  has  two  backoff  schemes:  the 
misbehaving  (on-state)  and  legitimate  (off-state)  backoff 
schemes,  either  of  which  can  be  used  to  transmit  a 
packet.  Such  an  intermittently  misbehaving  node  can 
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Fig.  3.  The  on  and  off  states  in  intermittent  backoff 
misbehavior. 

choose  its  status  by  following  various  criteria.  For  ex¬ 
ample,  it  can  switch  (on/off)  status  memorylessly  or 
based  on  history.  In  this  paper,  we  assume  that  an 
intermittently  misbehaving  node  chooses  its  next  status 
based  on  the  current  status;  i.e.,  we  define  intermittent 
misbehavior  with  a  Markov  chain  with  two  states  as 
follows. 

Definition  4  (Intermittent  backoff  misbehavior):  Given 
the  legitimate  backoff  scheme  B  and  a  misbehaving 
backoff  scheme  Bm/  the  backoff  scheme  of  intermittent 
backoff  misbehaving  nodes  is  defined  as  a  Markov 
process  n  =  0, 1,  2, ...},  where  n  denotes  the  n-th 

packet  to  be  transmitted,  Bi(n)  £  { B ,  Bm}.  Transition 
probabilities  from  B  to  and  from  £>m  to  B  are 
denoted  by  a  and  /?,  respectively  The  on-state  ratio 
0  £  (0, 1)  is  defined  as  the  steady-state  probability  of 
Bi (n)  =  Bm,  be.,  0  =  a /(a  +  (3). 

Remark  3:  As  shown  in  Fig.  3,  an  intermittently  misbe¬ 
having  node  can  frequently  switch  its  state  between  on 
and  off  with  backoff  schemes  £>m  or  B,  respectively  Our 
definition  of  intermittent  misbehavior  is  generic  since  the 
misbehaving  scheme  Bm  in  on  state  is  not  constrained  to 
be  a  specific  misbehaving  backoff  scheme. 

So  far,  we  have  defined  the  models  for  both  continu¬ 
ous  and  intermittently  misbehaving  nodes.  In  the  next 
subsection,  we  will  introduce  a  new  metric  to  quantity 
the  benefits  of  backoff  misbehaving  nodes. 

2.2  Definition  of  Order  Gain 

The  benefits  of  misbehavior  can  be  either  gaining  more 
resources  for  selfish  nodes  or  to  degrade  network  per¬ 
formance  even  without  performance  gain.  In  the  former 
case,  a  selfish  node  attempts  to  have  a  higher  chance  to 
access  the  channel  than  legitimate  nodes,  and  therefore 
performs  backoff  misbehavior  as  studied  in  [1],  [4],  [7], 
[8].  In  the  later  case,  the  goal  of  malicious  nodes  is  to 
disrupt  normal  network  operation.  Such  nodes  are  often 
referred  to  as  jammers  [13],  [14].  In  this  work,  we  focus 
on  the  former  case  in  that  it  can  also  evolve  into  the  later 
case,  which  will  be  discussed  in  Section  5.4. 

In  general,  the  benefits  of  misbehaving  nodes  are 
improving  their  occupancy  of  resources  and  achieving 
better  performance.  The  network  performance,  on  the 
other  hand,  can  be  evaluated  by  a  number  of  metrics, 
such  as  the  most  commonly-used  throughput  and  delay 
[15],  [16].  However,  the  two  performance  metrics  depend 
highly  on  protocol  specifications.  For  example.  Fig.  4(a) 
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Fig.  4.  A  packet  transmission  process  in  IEEE  802.1 1 . 


illustrates  a  simple  transmission  process  in  IEEE  802.11 
DCF.  During  the  transmission,  we  can  see  that  the 
packet  delay  includes  the  idle  slot  time,  freezing  time, 
DCF  Interframe  Space  (DIFS)  interval,  and  the  packet 
transmission  time.  If  we  consider  the  same  transmission 
process  under  a  different  MAC  protocol,  such  as  Zig- 
Bee  or  even  different  802.11  models,  the  packet  delay 
will  change  because  of  distinct  protocol  specifications. 
However,  we  do  not  want  our  analysis  to  be  limited  to 
a  particular  MAC  protocol  as  CSMA/CA  is  extensively 
adopted  in  wireless  networks.  Therefore,  we  attempt  to 
extract  the  essential  backoff  part  of  CSMA/CA  from  a 
MAC  protocol  by  deleting  all  protocol-related  signals,  as 
shown  in  Fig.  4(b). 

We  name  the  resultant  process  as  the  backbone  process 
since  it  is  protocol-independent  and  consists  of  a  number 
of  slots  induced  only  by  a  random  backoff  mechanism. 
In  the  backbone  process,  we  define  the  waiting  time  of 
a  node  as  follows. 

Definition  5  (Waiting  time):  The  waiting  time  of  a 
node,  W,  is  the  total  number  of  counted  slots  induced 
by  counter  decrements  between  the  instant  that  the 
node  starts  to  contend  for  the  channel  and  the  instant 
that  the  node  successfully  captures  the  channel;  that  is, 
W  =  YliL o  T(i),  where  N  is  the  number  of  collisions 
before  the  node  makes  a  successful  transmission  and 
T(i)  is  the  random  backoff  time  (counted  by  slots)  after 
the  i- th  collision. 

From  Fig.  4(b),  we  see  that  the  waiting  time  during 
the  transmission  is  6  slots,  which  is  not  dependent  on 
protocol  signals  and  the  time  duration  of  a  slot,  but 
is  determined  only  by  a  backoff  mechanism.  Thus,  it 
can  be  considered  as  a  generic  performance  metric  for 
CSMA/ CA.  Note  that  the  waiting  time  has  the  limitation 
of  measuring  the  real-time  delay  performance  when 
dealing  with  a  particular  CSMA/CA  protocol  such  as 
802.11,  since  it  neglects  protocol  specifications  such  as 
counting-down  freezing  and  DIFS  signals.  However,  it 
is  still  clear  that  a  node's  throughput  (or  delay)  is  in 
fact  a  consequence  of  its  waiting  time.  For  example,  if  a 
node's  waiting  time  is  zero  (meaning  that  it  never  waits 
to  transmit),  its  packet  delay  should  be  very  small  and 
its  throughput  is  almost  equal  to  the  channel  bandwidth. 
Thus,  waiting  time  can  immediately  represent  the  perfor¬ 
mance  of  a  node  with  a  backoff  mechanism:  the  shorter 
the  waiting  time,  the  better  the  performance  (i.e.,  higher 
throughput  and  shorter  delay). 

On  the  other  hand,  although  waiting  time  can  charac- 
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terize  the  performance  of  a  node,  our  objective  is  not 
to  evaluate  the  performance  of  a  single  node  but  to 
understand  benefits  of  backoff  misbehaving  schemes, 
that  is  the  gain  of  misbehaving  nodes  over  legitimate 
nodes.  To  this  end,  we  introduce  a  new  performance 
metric  by  considering  the  following  constraints: 

1)  This  metric  should  not  be  subject  to  a  particu¬ 
lar  protocol  because  of  the  wide  deployment  of 
CSMA/CA  networks,  such  as  IEEE  802.11  and 
IEEE  802.15.  Therefore,  the  definitions  of  control 
messages,  such  as  DIFS,  ACK  should  not  affect  the 
interpretation  of  the  gain.  Hence,  we  choose  the 
protocol-independent  waiting  time  Ik  as  a  basis 
for  our  performance  metric.  We  use  the  tail  distri¬ 
bution  function  P (W  >  t )  to  represent  the  waiting 
time  since  it  is  a  random  variable. 

2)  If  nodes  A  and  B  have  the  same  backoff  scheme, 
the  gain  of  node  A  over  node  B  should  be  zero. 

3)  If  the  gain  of  node  A  over  node  B  is  Gi  and  the 
gain  of  node  B  over  node  G  is  C?2,  then  the  gain  of 
node  A  over  node  G  follows  the  additive  rule,  that 
is,  G1+G2.  This  property  is  very  important  because 
it  enables  us  to  quantitatively  compare  the  impacts 
of  two  misbehaving  nodes  by  directly  comparing 
their  metrics. 

Keeping  these  requirements  in  mind,  we  introduce 
a  new  metric,  namely  order  gain  of  waiting  time3  as 
follows. 

Definition  6  (Order  gain  of  waiting  time):  Let  Wa  and 
WB  be  the  waiting  times  of  nodes  A  and  B,  respectively. 
The  order  gain  of  node  A  over  node  B  is  defined  as 

nwB  >  t ) 


G(t)  =  logt 


nwA  >  t)  ’ 


(*>0) 


(1) 


where  P (Wa  >  t)  and  P( WB  >  t )  are  the  tail  distribution 
functions  (or  complementary  cumulative  distribution 
functions,  CCDFs)  of  W a  and  WB/  respectively. 

Remark  4:  As  shown  in  (1),  the  order  gain  is  defined  as 
the  logarithm  of  the  ratio  between  two  tail  distribution 
functions  to  the  base  of  t.  Note  that  any  base  in  fact 
satisfies  the  three  requirements.  Here,  we  choose  the 
base  of  t  since  the  operator  of  logt(-)  can  yield  the  slope 
values  of  widely-used  power-law  distributions  in  log- 
log  scales  for  large  t,  which  in  turn  means  that  for  such 
distributions,  the  order  gain  has  an  approximate  geomet¬ 
ric  interpretation,  i.e.,  the  slope  difference  between  the 
tail  distribution  functions  of  misbehaving  and  legitimate 
nodes  on  log-log  scales. 


3  Order  Gains  of  Misbehaving  Backoff 
Schemes 

In  this  section,  we  present  our  analytical  results  on 
quantifying  the  gain  of  backoff  misbehavior.  In  partic¬ 
ular,  we  first  study  the  two  continuous  misbehaviors: 
double-window  misbehavior  and  fixed-window  misbehav¬ 
ior.  Then,  we  move  on  to  the  intermittent  misbehavior. 


3.  The  order  gain  of  waiting  time  will  be  simplified  as  order  gain 
thereafter;  unless  specified  otherwise. 


3.1  Double-Window  Backoff  Misbehavior 


A  double-window  misbehaving  node,  which  is  defined 
in  Definition  2,  adopts  binary  exponential  backoff  but 
uses  a  smaller  minimum  contention  window  than  the 
legitimate  nodes.  In  order  to  find  the  order  gain  of  double¬ 
window  misbehaving  nodes,  it  is  essential  to  obtain  the 
tail  distribution  functions  of  waiting  time  for  double¬ 
window  misbehaving  nodes  and  the  legitimate  nodes.  We 
first  derive  the  tail  distribution  function  of  the  waiting 
time  of  legitimate  nodes  in  the  following  lemma. 

Lemma  1:  Let  p  be  the  collision  probability4  of  a  legit¬ 
imate  node.  Based  on  Definition  1,  the  tail  distribution 
function  of  waiting  time  of  a  legitimate  node  ¥(W  >  t) 
is  lower  and  upper  bounded  by 

P(  — +  1)  <F(W>t)<-(—  +  i)  (2) 

4  \w0  J  P  V^o  ) 

for  all  t  sufficiently  large. 

Proof :  Please  refer  to  the  proof  in  [17].  □ 

With  Lemma  1,  we  state  our  main  result  on  the  order 
gain  of  double-window  misbehavior  as  follows. 

Theorem  1:  The  order  gain  of  a  double-window  backoff 
misbehaving  node  over  legitimate  nodes  is 


GD(t)  =  log2  (  — 
\Pd 


elnh 


where  p  and  pD  are  the  collision  probabilities  of  the 
legitimate  and  misbehaving  nodes,  respectively. 

Proof :  The  order  gain  of  the  double-window  misbehav¬ 
ing  node  over  legitimate  nodes  is  defined  as 

~  m  ,  nw>t ) 

GD(t)  =  logt 


F(wD>ty 


(3) 


where  P (W  >  t )  and  P (WD  >  t)  are  the  tail  distribu¬ 
tion  functions  of  waiting  time  for  legitimate  nodes  and 
the  double-window  misbehaving  node,  respectively.  From 
Lemma  1,  the  tail  distribution  function  of  waiting  time 
of  legitimate  nodes  can  be  represented  as 


p (w  >  t)  =  e  (ft/ w0  +  i)log2P) . 


(4) 


Since  a  double-window  misbehaving  node  also  adopts 
binary  exponential  backoff,  we  can  have 

p (wD  >t)  =  e  Ut/wD  +  if°^po 


')• 


(5) 


where  wD  and  pD  are  the  minimum  contention  window 
and  collision  probability  of  double-window  misbehaving 
node,  respectively.  By  substituting  (4)  and  (5)  into  (3), 
we  obtain 

GD{t)  =  log2  (p/pD)  +  0  (1/ Ini) . 

□ 

Remark  5:  According  to  Theorem  1,  the  order  gain  of 


4.  Throughout  this  paper,  we  define  the  collision  probability  of  a 
node  as  the  probability  that  there  is  at  least  one  other  node  transmitting 
when  the  node  sends  a  packet.  We  also  assume  that  it  always  holds 
that  a  collision  probability  is  in  (0,1)  for  our  analytical  analysis. 

5.  We  say  function  f(x)  is  of  the  same  order  as  function  g(x)  and 
write  f(x)  =  Q(g(x))  if  and  only  if  there  exist  two  positive  real 
numbers  ci  and  C2  and  a  real  number  xo  such  that  c\  \g(x)\  <  \f(x)\  < 
c2\g(x)\  for  all  x  >  xq. 
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Fig.  5.  Order  gains  of  a  double-window  backoff  misbe¬ 
having  node  with  minimum  contention  window  wD  =  6, 
8,  10,  and  12  in  an  802.11  network  in  the  presence  of  5 
legitimate  nodes. 


Fig.  6.  Order  gains  of  a  double-window  backoff  misbe¬ 
having  node  with  minimum  contention  window  wD  =  6 
in  an  802.1 1  network  with  different  numbers  of  legitimate 
nodes. 


double-window  misbehaving  nodes,  (?£>(£),  converges  to 
log2 (p/Pd)  as  t  —>  oo,  showing  that  the  order  gain  can 
be  determined  by  collision  probabilities  of  legitimate  and 
misbehaving  nodes.  In  this  paper,  we  do  not  discuss  how 
to  calculate  these  collision  probabilities,  but  it  has  been 
shown  in  [18]  that  the  ratio  p/pD  1  as  the  number 
of  nodes  goes  to  infinity.  Therefore,  the  order  gain  of 
a  double-window  misbehaving  node  will  approach  zero 
when  the  number  of  nodes  increases  to  infinity. 

To  attest  our  models  and  analytical  results,  we  use 
the  ns2  simulator  to  evaluate  the  performance  of  double¬ 
window  backoff  misbehavior  by  considering  an  802.11 
network  in  the  presence  of  one  double-window  backoff 
misbehaving  node  and  five  legitimate  nodes.  In  addition, 
we  use  the  following  setups  for  our  simulations:  we 
generate  saturated  traffic  at  all  misbehaving  and  legit¬ 
imate  nodes.  There  is  no  upper  limit  for  the  contention 
window  or  the  number  of  retransmissions  for  any  node. 
The  minimum  contention  window  of  legitimate  nodes  is 
wo  =  16. 

We  first  show  in  Fig.  5  the  empirical  order  gains  of 
the  misbehaving  node  compared  with  theoretical  results 
log (p/pD)  in  Theorem  1  for  different  minimum  con¬ 
tention  windows  wD  =6, 8, 10, 12.  Note  that  the  collision 
probabilities  p  and  pD  are  measured  during  simulations. 
As  [18]  has  shown  that  log (p/pD)  is  a  decreasing  function 
of  both  wD  and  the  number  of  nodes.  Fig.  5  illustrates 
that  the  order  gain  is  indeed  inversely  proportional  to 
wD:  the  larger  the  minimum  contention  window  wD, 
the  smaller  the  order  gain.  Fig.  5  also  shows  that  with 
increasing  waiting  time  t,  the  order  gain  converges 
monotonically  to  the  constant  log (p/pD)  as  predicated 
in  Theorem  1,  even  through  the  convergence  rate  is  low. 
Then,  in  Fig.  6,  we  fix  the  minimum  contention  window 
of  the  misbehaving  node  to  be  wD  =  6  and  show  the 
order  gain  of  the  double-window  misbehaving  node  for 
different  numbers  of  legitimate  nodes  in  the  network.  We 
also  observe  that  the  order  gain  of  the  misbehaving  node 


decreases  as  the  number  of  legitimate  nodes  increases. 
For  example,  the  order  gain  of  the  misbehaving  node 
converges  to  0.02  when  the  number  of  legitimate  nodes  is 
equal  to  50,  which  validates  our  statement  that  the  order 
gain  of  double-window  misbehaving  nodes  approaches 
zero  with  increasing  the  number  of  nodes  in  Remark  5. 


3.2  Fixed-Window  Backoff  Misbehavior 


Another  widely-adopted  continuous  misbehaving 
scheme  is  fixed-window  backoff  misbehavior.  A  fixed- 
window  backoff  misbehaving  node,  as  defined  in 
Definition  3,  never  increases  its  contention  window 
in  order  to  achieve  frequent  access  to  the  channel. 
Next,  we  first  derive  the  tail  distribution  function  of  its 
waiting  time,  followed  by  the  analysis  of  its  order  gain. 

Lemma  2:  For  a  fixed-window  misbehaving  node,  the 
tail  distribution  function  of  its  waiting  time  P(FFf  >  t) 
is  lower  and  upper  bounded  by 

ln{pF/wF)  <p (WF  >t)  <  e(^Ti^T“1)ln^, 
w  p, 

where  wF  and  pF  are  the  minimum  contention  window 
and  collision  probability  of  the  misbehaving  node,  re¬ 
spectively. 

Proof :  Please  refer  to  the  proof  in  [17].  □ 

With  Lemma  2,  we  are  ready  to  present  the  main  result 
on  the  order  gain  of  fixed-window  backoff  misbehavior. 

Theorem  2:  The  order  gain  of  a  fixed-window  backoff 
misbehaving  node  over  legitimate  nodes  is 

GAt)  =  0  (bh)  • 


The  proof  is  similar  to  Theorem  1.  The  order  gain  of 
a  fixed-window  backoff  misbehaving  node  is  represented 

<6> 
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Fig.  7.  Order  gain  of  a  fixed-window  backoff  misbehaving 
node  with  minimum  contention  window  wF  =6,8,1 0,  and 
12  in  an  802.11  network  in  the  presence  of  5  legitimate 
nodes. 


Using  the  bounds  of  F(W  >  t )  in  Lemma  1  and  the 
bounds  of  F(Wf  >  t )  in  Lemma  2  can  finish  the  proof. 

Remark  6:  Theorem  2  tells  that  the  order  gain  of  fixed- 
window  backoff  misbehavior  is  an  increasing  function  to 
infinity  as  t  — >  oc  regardless  of  the  number  of  nodes 
in  the  network.  This  implies  that  a  misbehaving  node 
can  always  obtain  substantial  benefits  from  fixed-window 
backoff  misbehavior.  Thus,  any  countermeasure  to  back¬ 
off  misbehavior  should  consider  fixed-window  backoff 
misbehavior  as  its  primary  target. 

Next  we  present  simulation  results  regarding  the  order 
gain  of  fixed-window  backoff  misbehavior.  We  use  the 
same  network  setups  in  Fig.  5.  But  the  misbeahving  node 
will  perform  fixed-window  backoff  misbehavior  instead  of 
double-window  backoff  misbehavior.  The  fixed  contention 
window  of  the  misbehaving  node  is  set  to  be  wF  = 
6, 8, 10, 12.  Fig.  7  shows  the  order  gain  of  the  misbehav¬ 
ing  node  for  different  wF .  It  is  observed  from  Fig.  7  that 
the  order  gain  of  the  fixed-window  backoff  misbehaving 
node  keeps  increasing  sub-linearly  as  t  increases.  This  is 
because  the  order  gain  of  fixed-window  misbehavior  is 
at  the  order  of  a  sub-linear  function  t/  log(t)  as  shown  in 
Theorem  2.  Note  also  that  the  increasing  rate  of  the  order 
gain  of  fixed-window  misbehavior  depends  on  wF .  Thus, 
theoretically,  fixed-window  misbehavior  with  a  small  wF 
can  have  very  large  values  of  order  gain  even  when  the 
waiting  time  t  is  small. 

We  also  consider  the  impact  of  the  number  of  le¬ 
gitimate  nodes  on  the  order  gain  of  the  misbehaving 
node,  as  shown  in  Fig.  8.  It  is  noted  from  Fig.  8  that 
compared  with  the  double-window  backoff  misbehaving 
node  in  Fig.  6,  the  number  of  legitimate  nodes  does 
not  have  a  significant  effect  on  the  order  gain  of  the 
fixed-window  backoff  misbehaving  node.  As  shown  in 
Fig.  8,  the  order  gain  always  increases  as  the  waiting 
time  increases,  regardless  of  the  number  of  legitimate 
nodes,  implying  that  in  general,  fixed-window  backoff 
misbehavior  can  obtain  larger  gain  than  double-window 
backoff  misbehavior. 


Fig.  8.  Order  gains  of  a  fixed-window  backoff  misbe¬ 
having  node  with  fixed  contention  window  wF  =  8  in 
an  802.11  network  with  different  numbers  of  legitimate 
nodes. 


Remark  7:  Compared  with  double-window  backoff  mis¬ 
behavior,  fixed-window  backoff  misbehavior  can  be  much 
more  harmful  to  a  wireless  network.  Therefore,  fixed- 
window  backoff  misbehavior  should  always  be  the  pri¬ 
mary  target  of  countermeasures  to  backoff  misbehavior. 


3.3  Intermittent  Backoff  Misbehavior 


We  have  studied  the  order  gains  of  two  widely-used 
backoff  schemes  for  continuous  misbehavior.  However, 
a  misbehaving  scheme  is  not  always  guaranteed  to 
be  continuous,  especially  when  there  exists  a  counter¬ 
strategy  in  the  network  which  aims  to  detect  and  disable 
misbehaviors.  It  has  been  shown  in  [5]  that  a  node 
performing  misbehavior  intermittently  may  evade  such 
misbehavior  detection.  Thus,  it  is  important  to  under¬ 
stand  the  benefits  of  such  an  intermittent  misbehaving 
in  a  wireless  network.  The  backoff  scheme  of  an  intermit¬ 
tently  misbehaving  node  is  defined  as  a  Markov  process 
with  on  and  off  states  in  Definition  4.  With  this  definition, 
we  have 

Theorem  3:  For  an  intermittently  misbehaving  node 
with  on-state  ratio  0 ,  assume  that  when  it  changes  its 
states,  all  nodes  can  immediately  re-enter  steady  states. 
Then,  its  order  gain  satisfies 


Gi(t) 


log2  —  +  0 

Poff 


where  pon  and  poff  are  steady-state  collision  probabilities 
of  legitimate  nodes  in  on  and  off  states,  respectively. 

Proof :  The  order  gain  of  an  intermittently  misbehav¬ 
ing  node  is  defined  as 


Gi(t)  =  logt(P(W  >£)/P(TL/ >£)),  (7) 


where  F(W  >  t )  and  P(Wj  >  t )  are  the  tail  distribution 
functions  of  the  waiting  time  for  legitimate  and  intermit¬ 
tently  misbehaving  nodes,  respectively.  The  probabilities 
of  the  intermittently  misbehaving  node  being  in  on  and 
off  states  are  P(on)  =  0  and  P(off)  =  1  —  6,  respectively. 
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Note  that  though  legitimate  nodes  do  not  change  their 
backoff  scheme,  they  are  affected  by  the  change  of  status 
of  the  intermittently  misbehaving  node,  therefore  also 
have  on  and  off  states.  Then,  we  have 


F(W>t)  =  0¥(W>t | on)  +  (1  -  0)F(W>t |off)  (8) 

and  F(Wi>t)  =  6F(Wi>t\on)+(l  —  6)F(Wi>t\off),  (9) 

respectively.  Substituting  (9)  and  (8)  into  (7)  yields 


Gi(t) 


logt 


/  e  +  (i  -  o)t~G^  \ 

yet-a^t)  +  (i  _  g)t-G(t) )  ’ 


(10) 


where  Gon(t)  =  logt  is  called  all-on  order  gain, 

and  Gff)  =  logt  is  called  on-off  legitimate  order 

gain,  which  is  due  to  the  difference  between  the  collision 
probabilities  pon  and  poff  of  legitimate  nodes  in  on  and 
off  states,  respectively.  Since  G(t )  can  be  regarded  as  the 
order  gain  of  a  double-window  misbehaving  node  over  a 
legitimate  node  with  collision  probabilities  pon  and  poff/ 
respectively.  We  reuse  Theorem  1  and  obtain  that 


G{t)  =  log2  ^  +  0 

Poff 


(11) 


Since  the  misbehaving  node  can  always  obtain  gains 
from  its  backoff  misbehavior  when  it  is  on,  it  holds  that 
P(Wj  >  t\on)  <  P (W  >  1 1 off) .  Thus,  Gon{t)  >  G{t )  and 
Qf-Gon(t)  <  Qt~G^f  Then,  from  (10),  we  have  found  the 
lower  bound 


Gift)  >  logt 

>  logt 


e  +  (i  -  e)t 


9t~G +  (1  — 


9 


t-GW 


=  G(f) 


In  9 
In  t 


(12) 


On  the  other  hand,  it  follows  from  (10)  that 

0  +  (1  -  e)t~a^' 

Gift)  <  logt 


(1  -  9)t~G<dl  1  '  (13) 

Because  G(t)  converges  to  log2  (pon  /poff )  >  0,  there  exists 
a  constant  to  such  that  t~G W  <  1  for  all  t  >  to,  and  then 
(13)  can  be  upper  bounded  by 

ln(l  —  6) 


=  «(()-■ 


In  t 


for  all  t  >  to.  Combining  (11),  (12),  and  (14)  yields 
Gl(t)  =  log2  +  0  ( - — 7 

Poff  \\nt 


(14) 

(15) 

□ 


Theorem  3  shows  that,  perhaps  surprisingly,  the  order 
gain  of  an  intermittently  misbehaving  node  G/(t)  always 
converges  to  a  constant  that  does  not  depend  on  9.  In  the 
following,  we  use  simulations  to  investigate  the  effect  of 
6  on  the  order  gain  of  intermittent  misbehavior. 

We  consider  an  802.11  network  consisting  of  five 
legitimate  nodes  and  one  intermittently  misbehaving 
node  in  simulations.  The  intermittently  misbehaving 
node  chooses  a  random  backoff  time  uniformly  from 
[0, 7]  when  it  is  in  on-state.  Fig.  9  demonstrates  the 
order  gains  of  the  intermittently  misbehaving  node  for 
different  on-state  ratios  0.  We  see  from  Fig.  9  that  the 
order  gain  of  the  misbehaving  node  always  exhibits  an 


Fig.  9.  Order  gain  of  an  intermittently  misbehaving  node 
in  an  802.1 1  network  with  5  legitimate  nodes. 


Fig.  10.  Order  gains  of  various  misbehaving  nodes  in  an 
802.11  network  with  5  legitimate  nodes. 


initial  increasing  phase,  and  after  reaching  a  maximum, 
it  starts  to  converge  decreasingly.  This  reveals  an  in¬ 
teresting  phenomena  that  there  exists  a  phase  transition 
phenomenon  in  the  order  gain  of  intermittent  misbehavior. 
The  phase  transition  phenomenon  is  more  evident  when 
6  becomes  large.  We  denote  by  t*  the  phase  transition 
point,  which  is  the  value  of  waiting  time  corresponding 
to  the  maximum  of  the  order  gain.  During  simulations, 
we  find  that  t*  increases  as  0  increases,  but  the  increment 
is  not  significant.  For  example,  in  Fig.  9,  t*  increases  from 
18  to  33  as  0  goes  from  50%  to  99%. 

Fig.  9  also  shows  that  the  order  gain  of  an  inter¬ 
mittently  misbehaving  node  is  not  significant  when  6 
is  small.  For  example,  when  0  =  50%,  the  order  gain 
is  always  smaller  than  0.35  and  the  phase  transition 
phenomenon  is  not  evident.  When  0  =  70%,  the  order 
gain  is  also  upper  bounded  by  0.6.  Consequently,  our 
simulation  results  indicate  that  if  an  intermittently  mis¬ 
behaving  node  attempts  to  evade  misbehavior  detection 
by  choosing  a  small  0,  it  cannot  achieve  large  values  of 
order  gain.  An  extreme  case  is  that  when  0  =  0,  there  is 
no  performance  gain  of  intermittent  nodes  which  cannot 
degrade  network  performance  because  it  always  follows 
the  legitimate  backoff  scheme. 
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On  the  other  hand,  if  an  intermittently  misbehaving 
node  chooses  a  large  0  to  achieve  substantial  gains, 
it  may  not  be  able  to  evade  misbehavior  detection  in 
that  it  appears  similarly  as  a  continuous  misbehaving 
node.  For  example,  we  can  see  in  Fig.  9  that  when  the 
intermittently  misbehaving  node  has  0  =  99%,  its  order 
gain  is  almost  the  same  as  9  =  100%  for  small  waiting 
time  t.  In  this  case,  the  intermittently  misbehaving  node 
has  a  higher  risk  to  be  detected. 

We  have  provided  ns2  simulation  results  for  both  con¬ 
tinuous  and  intermittent  misbehaviors.  To  further  verify 
our  analytical  modeling  and  derivation,  we  consider  a 
more  heterogenous  network  with  five  legitimate  nodes, 
one  fixed-window  misbehaving  node,  one  double-window 
misbehaving  node,  and  an  intermittently  misbehaving 
node  with  0  =  90%  that  performs  fixed-window  misbehav¬ 
ior  in  its  on-state.  Fig.  10  shows  the  simulation  results  on 
the  order  gains  for  different  misbehaving  nodes  in  this 
scenario.  As  we  can  see  from  Fig.  10,  the  order  gain  of 
the  fixed-window  misbehaving  node  always  increases  as 
the  waiting  time  increases;  the  order  gain  of  the  double¬ 
window  misbehaving  node  is  approximately  a  constant; 
and  the  order  gain  of  the  intermittently  misbehaving 
node  has  a  phase  transition  phenomenon  and  eventually 
converges  as  the  waiting  time  increases. 

Fig.  10  validates  that  our  analytical  results  on  assessing 
the  order  gains  of  misbehaving  nodes  are  general  and 
depend  on  neither  the  number  of  legitimate  and  mis¬ 
behaving  nodes  nor  the  heterogeneity  of  a  CSMA/CA- 
based  wireless  network. 

4  From  Order  Gain  to  Throughput  Gain 
in  IEEE  802.11  Networks 

We  have  so  far  investigated  the  performance  gains  of 
continuous  and  intermittently  misbehaving  nodes  via 
the  metric  of  order  gain,  which  is  a  general  metric 
to  quantify  backoff  misbehavior  in  CSMA/CA-based 
wireless  networks.  For  IEEE  802.11  DCF  that  becomes 
ubiquitous  nowadays,  the  order  gain-based  analysis  of 
previous  misbehavior  models  is  also  applicable  since  the 
metric  of  order  gain  is  based  on  the  essential  waiting 
time  that  is  measured  by  the  number  of  slots  and  does 
not  depend  on  any  specific  protocol.  However,  the  MAC 
layer  throughput  of  a  node  is  one  of  the  most  widely- 
used  metrics  in  802.11  DCF  (e.g.  [15],  [19]-[21]).  More¬ 
over,  the  throughput,  unlike  the  order  gain,  can  directly 
reflect  how  much  data  a  node  has  transmitted  over  a 
time  period.  Thus,  it  is  of  great  interest  to  investigate 
how  much  throughput  gain  a  misbehaving  node  can 
obtain  from  legitimate  nodes  in  an  802.11  network. 

In  the  following,  we  consider  the  basic  access  model 
in  IEEE  802.11  DCF  as  our  primary  protocol  model.  We 
assume  that  the  idle  slot  length  and  packet  length  are 
fixed  to  be  cr  and  L  (measured  by  ps),  respectively.  We 
also  assume  that  all  nodes  are  in  saturated  state.  It  has 
been  shown  in  the  literature  (e.g.,  [15],  [19]-[21])  that  it  is 
difficult  to  derive  a  closed-form  throughput  formula  for 
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a  node  working  under  IEEE  802.11  DCF.  Therefore,  our 
goal  in  this  section  is  not  to  derive  the  exact  throughput 
gain  for  a  certain  type  of  backoff  misbehaving  nodes, 
but  to  show  the  relation  between  the  metric  of  order 
gain  and  throughput  gain  of  a  misbehaving  node  in  an 
IEEE  802.11  network.  Formally,  we  define  a  misbehaving 
node's  throughput  gain  over  legitimate  nodes  as  follows. 

Definition  7:  Let  the  access  delay  of  a  node  be  the  real¬ 
time  interval  (measured  by  /us)  from  the  instant  that  the 
node  begins  to  contend  for  the  channel  to  the  instant 
that  the  node  finishes  a  successful  transmission.  Then, 
the  saturated  throughputs  of  a  legitimate  node  and  a 
misbehaving  node  are  defined  as 


S  =  LfE(D) 

(16) 

Sm  =  L/E(Dm), 

(17) 

where  D  and  Dm  are  the  access  delays  of  the  legit¬ 
imate  node  and  the  misbehaving  node,  respectively. 
The  throughput  gain  ratio  for  the  misbehaving  node  is 
defined  as  the  ratio  between  the  saturated  throughputs 
of  the  misbehaving  node  and  the  legitimate  node;  i.e., 

Rm  =  Sm/S  =  E(D)/E(Dm).  (18) 

Remark  8:  From  (18),  we  can  see  the  throughput  gain 
ratio  is  essentially  the  ratio  between  the  mean  access 
delays  of  the  legitimate  node  and  the  misbehaving  node. 
Therefore,  in  the  following,  we  obtain  the  desirable 
throughput  gain  ratio  by  computing  the  ratio  between 
mean  access  delays  for  legitimate  and  misbehaving 
nodes. 

With  Definition  7,  we  state  our  main  results  about 
the  throughput  gain  of  backoff  misbehaving  nodes  as 
follows. 

Theorem  4  (Throughput  Gain  Ratio):  In  an  IEEE  802.11 
network  with  n  legitimate  nodes  and  a  backoff  mis¬ 
behaving  node,  assume  that  all  nodes  use  the  same 
physical  layer  parameters  (e.g.,  modulation  and  error- 
correction  coding).  If  the  order  gain  of  the  misbehaving 
node  Gm(t)  satisfies  limn5t^oo  Gm(t )  =  0,  the  throughput 
gain  ratio  of  the  misbehaving  node  is  always  upper- 
bounded,  i.e., 

lim  Rm(n)  <  oc.  (19) 

n— ►  oo 

If  Gm(t )  satisfies  lim^^oo  Gm(£)  >  0,  the  throughput 
gain  ratio  of  the  misbehaving  node  goes  to  infinity  as 
n  — >  oc  ,  i.e., 

lim  Rm(n)  =  oc.  (20) 

n— ►  oo 

Proof :  The  proof  consists  of  two  parts. 

Part  I.  (limn?t^oo  Gm(t)  =  0  =>  limn^oo  Rm(n)  <  oo) 

The  access  delay  for  802.11  DCF  has  been  well  mod¬ 
eled  and  studied  in  the  literature.  Following  the  model 
of  access  delay  for  802.11  DCF  in  [22],  the  mean  access 
delays  of  a  legitimate  node  and  a  misbehaving  node  can 
be  represented  as 

E(D)  =  {{1  -  p)a  +  pL)E(W)  + -T-  (21) 

1  ~P 
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and 


E(Dm)  =  ((1  -  pm)cr  +  pmL)E(Wm)  +  — 


Pm 


(22) 


respectively,  where  p  and  pm  are  the  collision  proba¬ 
bilities  of  the  legitimate  node  and  misbehaving  node, 
respectively.  As  shown  in  [18],  the  collision  probability  p 
is  an  increasing  function  of  n  and  converges  to  0.5.  Then, 
from  Lemma  1,  the  mean  waiting  time  of  a  legitimate 
node  satisfies  that  limn^oo  E (W)  =  oo. 

Since  the  order  gain  of  the  misbehaving  node  con¬ 
verges  to  0;  i.e.. 


lim  Gm(t)  =  lim  logt  _f  [T  =  0, 

n,t—>oc  n,t— ►  oo  _rytVm  >  t) 

From  Lemma  1  and  (23),  we  have 


(23) 


/  P 

1™  loSt  ~T 

n,t^oo  \  4 


t 

Wo 


log  2P 


-  log,  P(Wm  >  t)  I  =0, 


and 


lim  logt  P(Wm  >  t)  =  lim  log2p  =  —  1, 

n.t— >  oo  n^oo 


(24) 


which  indicates  that  Wrn  also  asymptotically  follows 
the  power-law  distribution  with  the  same  parameter  of 
limn^oo  -  log 2p  =  1  as  W.  Thus,  limn^oo  E(VL)/E(Wm) 
is  always  upper  bounded  although  E(W)  and  E (Wm)  go 
to  infinity,  respectively.  Therefore,  the  throughput  gain 
ratio  can  be  represented  as 

IPY  n  j 

lim  Rm  (n)  =  lim 


n  >o°  E (Dm) 

((l-p)<7+p£)E(WQ  +  T^ 

n^°°  ((l  —  Pm) a  +  prriL)K(Wm)  +  yz 


=  lim 


Pm 


=  lim 

n— xx) 


(1  -p)a+pL  +  ^3 


pMW) 


((1  Pm)&  +  PmL)  +  (i_p)E(W) 


(25) 


Since  limn^00(E(4r)/E(U/m))  is  upper  bounded  and 
1 

(25)  that 


limra^00((l  —  Pm) &  +  pmL)  ^  0,  we  finally  obtain  from 


lim  Rm(n)  <  oo. 


(26) 


Part  II.  (lim^, — ,oo  Gm{t)  0  =)>  lim^ — >oo  Rm ip)  —  oo) 

First,  the  order  gain  of  the  misbehaving  node  satisfies 

lim  Gm(t)  =  lim  logt  =  e  >  0.  (27) 

n,t— >00  n,t—>oo  \r\Wm  >  t) 

From  Lemma  1  and  (23),  we  have 

/  +  \  1o£2  P 


lim 

n,t— >•  oo 

and 


lo£t  V—  (  —  +  1 

\^o 


^  4 


t 


-  logt  P(Wm  >  t)  <  e, , 


lim  logt  P(Wm  >  t)  >  lim  log2p  —  e  =  —  (e  +  1) , (28) 

n,t— xx)  n—>oo 

which  indicates  that  Wm  asymptotically  follows  the 
power-law  distribution  with  parameter  1  +  e  >  1  and 
E (Wm)  is  always  well-defined,  i.e.,  limn^oo  E (Wm)  <  oo. 
Therefore,  from  (25),  the  throughput  gain  ratio  is 

lim  Rm(n)  =  oo.  (29) 

n— xx) 

Combining  the  two  parts  completes  the  proof.  □ 


TABLE  1 

Classifying  backoff  misbehaviors  in  terms  of  throughput  gain. 


Finite-Gain 

Scalable-Gain 

Double-window  misbehavior. 
Intermittent  misbehavior 

Fixed-window  misbehavior 

Remark  9:  Theorem  4  shows  that  any  backoff  misbe¬ 
havior  yields  one  of  two  consequences  as  the  number 
of  legitimate  nodes  increases:  (i)  the  throughput  gain 
ratio  is  bounded  above,  (ii)  the  throughput  gain  ratio 
goes  to  infinity.  Theorem  4  further  indicates  that  all 
backoff  misbehavior  models  can  be  in  fact  categorized 
into  two  types  in  terms  of  harmfulness.  The  first  type 
of  misbehavior  always  has  upper-bounded  throughput 
gain  ratio,  regardless  the  number  of  users  in  a  network. 
Thus,  we  refer  this  type  of  misbehavior  as  finite-gain 
backoff  misbehavior.  The  second  type  of  misbehavior  can 
be  more  harmful  and  its  throughput  gain  ratio  goes  to 
infinity  as  the  number  of  users  increases.  We  refer  it 
scalable-gain  backoff  misbehavior,  which  implies  the  gain 
of  this  type  of  misbehavior  is  scalable:  the  larger  the 
network  scale,  the  more  the  gain  of  the  misbehaving 
node. 

In  previous  sections,  based  on  the  basic  backoff  struc¬ 
ture  of  misbehaving  nodes,  we  generalized  misbehavior 
models  into  continuous  misbehavior  and  intermittent 
misbehavior.  From  Theorem  4,  we  can  categorize  backoff 
misbehavior  models  into  finite-gain  misbehavior  and 
scalable-gain  misbehavior  in  terms  of  the  throughput 
gain  ratio.  Thus,  existing  misbehaviors  can  be  formally 
separated  into  the  two  types  in  terms  of  their  throughout 
gains,  as  shown  in  Table  1.  The  throughout  gain  obtained 
by  misbehaving  nodes,  on  the  other  hand,  indicates 
that  there  exists  throughput  degradation  of  all  legitimate 
nodes.  The  larger  the  gain  of  a  misbehaving  node,  the 
larger  the  throughput  degradation  of  legitimate  nodes. 
We  show  in  the  following  that  when  the  number  of 
nodes  increases  in  a  network,  finite-gain  misbehavior  has 
only  negligible  impact  on  the  network. 

Definition  8  (Throughput  Degradation  Ratio):  Let  S  and 
Srn  be  the  throughputs  of  a  legitimate  node  and  a  backoff 
misbehaving  node  in  a  wireless  network.  Let  Si  be  the 
throughput  of  a  legitimate  node  when  all  misbehaving 
nodes  do  not  perform  any  misbehavior;  i.e..  Si  is  the 
throughput  that  a  legitimate  node  should  have.  Then, 
the  throughput  degradation  ratio  of  a  legitimate  node 
due  to  backoff  misbehavior  is  defined  as 

Rd^l-S/Si.  (30) 

Theorem  5  (Impact  of  finite-gain  backoff  misbehavior):  In 
an  IEEE  802.11  network  in  the  presence  of  n  legitimate 
nodes  and  nm  backoff  misbehaving  nodes  with  the 
same  physical-layer  parameters.  If  the  misbehaving 
nodes  are  all  finite-gain  misbehaving  and  nm  is  fixed, 
then  the  throughput  degradation  ratio  of  a  legitimate 
node,  Rd  satisfies  that 

lim  Rd  =  0. 

n— xx) 


(31) 
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Proof  :  We  assume  that  the  channel  bandwidth  is 
normalized  into  1  and  is  efficiently  shared  by  legitimate 
nodes  and  misbehaving  nodes,  i.e., 

nS  +  nmSm  =  l.  (32) 

For  the  finite-gain  misbehaving  nodes,  it  always  holds 
that 

Sm/S  <  c,  (33) 

where  c  is  a  sufficiently  large  constant.  Thus,  it  follows 
from  (32)  and  (33)  that  1/n  >  S  >  l/(cnm  +  n).  If  all 
misbehaving  nodes  perform  legitimately,  we  have 

Si  =  1/ (n  +  nm). 

Therefore,  we  can  obtain 

lim  „1/"  '  >  lim  £  >  lim  +  "), 

n^oo  l/(n  +  nm)  n^oo  Si  n^oo  1  /(n  +  7lm) 

and  limn^oo  S/ Si  =  1. 

Finally,  the  throughput  degradation  ratio  of  a  legiti¬ 
mate  node  is 

lim  Rd  =  1  —  lim  S/Si  =  1  —  1  =  0. 

n— »•  oo  n— >oo 

□ 

Remark  10:  In  general,  the  deployment  cost  of  a  coun¬ 
termeasure  increases  as  the  number  of  nodes  increases 
since  the  countermeasure  needs  to  not  only  monitor 
states  of  all  nodes,  but  also  consistently  perform  com¬ 
putations  based  on  their  activities  to  detect  any  misbe¬ 
havior  (e.g.  [23]).  Existing  work  [9]  has  indicated  that 
countermeasures  to  backoff  misbehavior  should  be  more 
concerned  with  misbehaving  nodes  that  can  significantly 
affect  the  network  performance.  Based  on  our  analytical 
results,  we  suggest  that  in  large-scale  networks ,  counter¬ 
measures  to  backoff  misbehavior  should  focus  primarily  on 
scalable-gain  misbehavior  since  when  the  number  of  nodes 
is  large,  the  effect  of  finite-gain  misbehavior  becomes 
marginal  from  a  damage  perspective  as  shown  in  Theo¬ 
rem  5. 


5  Performance  Evaluation  and  Discus¬ 
sions 

In  previous  sections,  we  have  investigated  the  perfor¬ 
mance  gains  of  a  variety  of  backoff  misbehaviors  in 
wireless  networks.  Based  on  analytical  analysis  and  sim¬ 
ulations,  we  used  both  the  metric  of  order  gain  and 
the  metric  of  throughput  gain  ratio  to  quantify  how 
many  benefits  a  backoff  misbehaving  node  can  obtain. 
To  further  evaluate  the  performance  gain  of  misbehav¬ 
ing  nodes  and  the  impact  of  backoff  misbehavior  on 
a  practical  wireless  network,  we  use  off-the-shelf  IEEE 
802.11  products  and  the  Madwifi  driver  [24]  to  set  up 
an  experimental  WiFi  network  in  the  presence  of  a 
misbehaving  node.  Note  that  Madwifi  is  an  advanced 
WiFi  driver  for  Atheros  chipsets.  It  provides  application- 
layer  interfaces  for  users  to  modify  WiFi  physical-layer 
parameters,  such  as  the  minimum  contention  window 
and  the  retry  limit. 


5.1  Experiment  Setup 

5.1.1  Network  Deployment 

The  experimental  network  consists  of  six  laptops  and 
two  iPAQ  pocket  PCs  with  plug-in  wireless  cards.  The 
laptops  and  pocket  PCs  are  associated  with  a  Cisco 
Access  Point  (Aironet  1200  series)  working  under  IEEE 
802.11b.  There  is  no  other  access  point  working  during 
our  experiments.  We  place  all  devices  inside  a  laboratory 
to  ensure  that  they  are  under  the  same  channel  condition. 
The  only  difference  between  legitimate  and  misbehaving 
nodes  is  the  backoff  scheme.  The  other  parameters,  such 
as  physical-layer  rate  and  retry  limit,  are  set  up  with 
the  same  values  in  all  nodes.  As  it  is  difficult  to  find 
a  completely  interference-free  environment,  we  perform 
all  experiments  at  midnight  to  minimize  the  impact  of 
interference  on  our  experimental  results. 

5. 1.2  Network  Traffic 

The  commonly-used  network  testing  tool,  Iperf  [25],  is 
used  to  generate  traffic  over  the  network.  We  use  Iperf 
to  generate  UDP  streams  at  the  rate  of  10Mbps  that  can 
fill  up  the  transmission  queue  at  each  device  such  that 
all  devices  are  in  saturated  state. 

5.1.3  Performance  Metric 

It  is  not  easy  to  accurately  measure  the  waiting  time 
at  the  MAC  layer,  since  commercial  802.11  adapters  do 
not  expose  their  internal  parameters  to  higher  layers. 
Therefore,  in  our  experiments,  throughput  of  each  node 
is  measured  for  performance  evaluation. 

5.2  Experimental  Results 

Throughout  our  experiments,  legitimate  nodes  always 
adopt  the  binary  exponential  backoff:  the  minimum 
and  maximum  contention  windows  are  32  and  65536, 
respectively.  The  retry  limit  for  both  legitimate  and 
misbehaving  nodes  is  set  to  be  16.  Here,  we  set  large 
values  for  the  maximum  contention  window  and  the 
retry  limit  to  validate  our  asymptotic  analysis. 

We  first  study  the  performance  gain  of  double-window 
and  fixed-window  misbehaving  schemes.  Fig.  11  shows 
the  throughput  gain  ratio  of  a  double-window  misbe¬ 
having  node  as  a  function  of  the  minimum  contention 
window  of  the  misbehaving  node  and  the  number  of 
legitimate  nodes.  We  can  see  from  Fig.  11  that  the 
through  gain  ratio  of  the  misbehaving  node  decreases  as 
the  minimum  contention  window  increases  and  that  the 
throughput  gain  ratio  remains  approximately  the  same 
when  the  number  of  legitimate  nodes  increases,  which 
validates  our  analytical  results  in  Section  4  showing  that 
the  throughput  gain  ratio  is  always  upper  bounded. 
According  to  Theorem  5,  we  can  expect  that  when  the 
number  of  legitimate  nodes  increases  in  the  network, 
double-window  misbehavior  only  causes  negligible  per¬ 
formance  degradation  of  legitimate  nodes. 

Fig.  12  shows  the  throughput  gain  ratio  of  a  fixed- 
window  misbehaving  node  as  a  function  of  the  minimum 
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Fig.  1 1 .  Throughput  ratio  of  a  double¬ 
window  backoff  misbehaving  node  to 
a  legitimate  node  for  different  backoff 
misbehaving  schemes. 


Fig.  12.  Throughput  ratio  of  a  fixed- 
window  backoff  misbehaving  node  to 
a  legitimate  node. 


Fig.  13.  Throughput  ratio  of  the  mis¬ 
behaving  node  to  a  legitimate  node 
for  different  on-state  ratios  6. 


contention  window  of  the  misbehaving  node  and  the 
number  of  legitimate  nodes.  From  Fig.  12,  we  observe 
that  the  throughput  gain  ratio  of  th e  fixed-window  misbe¬ 
having  node  is  proportional  to  the  number  of  legitimate 
nodes:  the  more  the  number  of  legitimate  nodes,  the 
larger  the  throughput  gain  ratio  of  the  misbehaving 
node.  For  example,  when  the  contention  window  of 
the  fixed-window  misbehaving  node  is  4,  the  throughput 
gain  ratio  increases  from  12.9  to  30.2  as  the  number  of 
legitimate  nodes  goes  from  1  to  7.  Fig.  12  validates  our 
results  in  Table  1,  which  shows  that  fixed-window  backoff 
misbehavior  belongs  to  scalable-gain  misbehavior. 

From  Figs.  11  and  12,  we  see  that  if  the  number  of 
legitimate  nodes  is  small,  double-window  backoff  mis¬ 
behavior  and  fixed-window  backoff  misbehavior  have 
similar  throughput  gain.  If  the  number  of  legitimate 
nodes  increases,  fixed-window  backoff  misbehavior  has 
much  more  gain  than  double-window  backoff  misbehav¬ 
ior.  For  example,  when  the  misbehaving  node  has  a 
minimum  contention  window  of  8  and  the  number 
of  legitimate  nodes  is  1,  both  double-window  backoff 
misbehavior  and  fixed-window  backoff  misbehavior  have 
approximate  throughput  gain  ratio  of  4.5.  When  the 
number  of  legitimate  nodes  becomes  7,  the  throughput 
gain  ratio  of  double-window  backoff  misbehavior  is  still 
about  4.5  but  that  of  fixed-window  backoff  misbehavior 
reaches  13.  We  can  conclude  that  the  number  of  users 
should  be  considered  as  a  critical  factor  to  the  evaluation 
of  providing  countermeasures  to  a  network.  When  the 
number  of  users  is  small,  countermeasures  can  focus 
on  both  double-window  and  fixed-window  misbehaviors. 
When  the  number  of  users  is  large,  countermeasures  can 
focus  only  on  fixed-window  misbehavior  since  the  gain 
of  double-window  misbehavior  is  always  bounded  and 
therefore  it  can  only  cause  negligible  performance  degra¬ 
dation  of  legitimate  nodes,  as  indicated  in  Theorem  5. 

We  then  study  the  performance  of  intermittent  misbe¬ 
havior  by  considering  a  one-bad  and  five-good  scenario. 
The  intermittently  misbehaving  node  chooses  its  random 
backoff  time  uniformly  from  [0,  7]  in  the  on  state  and 


performs  legitimate  backoff  in  the  off  state.  Fig.  13 
demonstrates  the  throughput  ratio  of  the  intermittently 
misbehaving  node  to  a  legitimate  one,  as  a  function 
of  on-state  ratio  6.  We  observe  that  the  throughput 
ratio  does  not  increase  linearly  with  the  increasing  of 
6,  and  the  ratio  is  large  only  when  0  is  very  large.  The 
reason  is  that  0  denotes  the  switching  probability  of 
misbehavior.  For  example,  when  6  =  50%,  it  switches 
between  on  and  off  states.  From  the  time  perspective,  it 
in  fact  spends  more  time  (large  than  50%)  on  legitimate 
behavior  since  it  has  smaller  access  probability  when 
behaving  legitimately.  Therefore,  the  overall  throughput 
of  the  intermittently  misbehaving  node  is  less  than  50% 
even  when  0=50%.  Thus,  a  node  has  to  choose  a  large  0  to 
obtain  significant  benefits  from  intermittent  misbehavior. 

5.3  Effects  of  Upper  Limits  on  Retransmissions  and 
Contention  Window 

As  we  have  acknowledged,  our  theoretical  models  are 
based  on  the  assumption  that  there  is  no  upper  limit  on 
either  the  number  of  retransmissions  or  the  contention 
window.  As  there  always  exist  such  upper  limits  in 
practice,  we  discuss  via  both  simulations  and  experi¬ 
ments  the  impact  of  these  upper  limits  on  our  theoretical 
results. 

We  first  use  ns2  simulations  to  evaluate  the  effect  of 
the  upper  limits.  We  set  up  an  IEEE  802.11  network 
with  one  misbehaving  node  and  five  legitimate  nodes. 
The  minimum  contention  windows  for  legitimate  and 
misbehaving  nodes  are  32  and  8,  respectively.  For  all 
nodes,  the  upper  limit  of  the  contention  window  is  1024 
(the  same  as  that  in  IEEE  802.11);  and  the  upper  limit  of 
the  number  of  transmissions  of  a  single  packet  (denoted 
by  Nr)  varies  from  3  to  7.  All  nodes  are  saturated. 

Fig.  14  illustrates  the  order  gain  of  the  misbehav¬ 
ing  node  when  it  chooses  double-window  misbehavior. 
From  Fig.  14,  we  can  find  that  the  finite  value  of  Nr 
leads  to  a  finite  region  phenomenon  for  the  order  gain: 
as  waiting  time  t  increases,  the  order  gain  dramatically 
increases  to  infinity.  In  other  words,  the  order  gain  is 
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Fig.  14.  Order  gains  of  a  double-  Fig.  15.  Order  gains  of  a  fixed-  Fig.  16.  Throughput  gain  of  a  mis- 
window  misbehaving  node  with  finite  window  misbehaving  node  with  finite  behaving  node  with  finite  retransmis- 
retransmissions.  retransmissions.  sions. 


finite  only  when  t  is  sufficiently  small.  This  is  because  the 
tail  distribution  of  the  waiting  time  for  the  misbehaving 
node  P {Wd  >  t)  will  become  zero  when  t  is  large 
enough.  For  example,  when  NR  =  3,  the  misbehaving 
node  will  attempt  to  transmit  a  packet  3  times  before 
it  drops  the  packet.  Therefore  the  maximum  possible 
waiting  time  is  8+16+32  =  56.  Then,  it  is  impossible 
that  the  waiting  time  Wd  is  larger  than  56,  leading  to 
F(Wd  >  56)  =  0.  Accordingly,  the  order  gain  Go{t)  = 
log t(P(W  >  t) / PfW d  >  t))  increases  to  infinity  as  t 
approaches  56. 

Fig.  15  shows  the  order  gain  of  the  misbehaving  node 
when  it  chooses  fixed-window  misbehavior.  We  can  also 
see  the  finite  region  phenomenon  in  Fig.  15:  the  order  gain 
of  the  fixed-window  misbehavior  dramatically  increases 
to  infinity  when  the  waiting  time  t  is  large  enough. 

Figs.  14  and  15  indicate  that  we  have  to  evaluate  the 
order  gain  of  a  misbehaving  node  at  its  finite  region 
(e.g.,  t  is  small)  when  considering  a  practical  scenario; 
otherwise,  the  order  gain  will  become  infinity.  We  can  see 
that  the  order  gain  with  infinite  retransmissions  is  still  a 
good  approximation  of  that  with  finite  retransmissions, 
especially  for  fairly  large  NR.  For  example,  in  Fig.  14, 
the  order  gain  of  NR  =  7  always  has  similar  values  to 
the  order  gain  of  NR  =  oo  when  t  <  900. 

Next,  we  investigate  via  experiments  how  this  finite 
region  phenomenon  of  the  order  gain  affects  our  the¬ 
oretical  results  on  throughput  analysis.  We  consider 
an  IEEE  802.11b  network  with  one  misbehaving  node 
and  a  varying  number  of  legitimate  nodes.  The  setups 
are  the  same  as  those  in  Section  5.1,  except  that  all 
nodes  have  the  same  upper  limit  for  the  number  of 
transmissions  for  a  single  packet  NR.  In  addition,  the 
maximum  contention  window  for  all  nodes  is  set  to  be 
1024.  The  minimum  contention  windows  of  legitimate 
and  misbehaving  nodes  are  32  and  8,  respectively. 

Fig.  16  illustrates  the  throughput  gain  ratio  of  the  mis¬ 
behaving  node  as  a  function  of  the  number  of  legitimate 
nodes.  It  can  be  found  in  Fig.  16  that  the  smaller  the 
retry  limit  NR,  the  smaller  the  throughput  gain  ratio  of 
the  misbehaving  node.  This  is  because  when  a  legitimate 


node  has  a  smaller  NR/  it  will  more  frequently  start  a 
new  transmission  by  resetting  its  contention  window  to 
the  minimum,  thereby  having  more  chance  to  access  the 
channel.  From  Fig.  16,  we  can  see  that  the  throughput 
gain  ratio  of  double-window  misbehavior  is  approxi¬ 
mately  the  same  regardless  of  the  number  of  legitimate 
nodes;  while  that  of  fixed- window  misbehavior  increases 
proportionally  to  the  number  of  legitimate  nodes.  How¬ 
ever,  the  finite  value  of  NR  imposes  an  upper  bound  on 
the  throughput  gain  ratio  of  fixed-window  misbehavior. 
For  example,  the  upper  bound  is  9.9  and  12.1  when 
Nr  =  3  and  5,  respectively. 

Fig.  16  indicates  that  with  upper  limits  of  the  con¬ 
tention  window  and  the  number  of  retransmissions,  the 
finite-gain  misbehavior  (e.g.,  double-window)  still  has  a 
finite  throughput  gain  ratio;  while  scalable-gain  misbe¬ 
havior  (e.g.  fixed-window)  has  a  throughput  gain  ratio 
that  initially  increases  as  the  number  of  legitimate  nodes 
increases,  but  also  has  an  upper  bound  when  the  number 
of  legitimate  nodes  is  sufficiently  large.  We  conclude 
from  Fig.  16  that  analytical  results  in  Theorem  4  partially 
hold  in  practical  scenarios  and  that  such  upper  limits 
alleviate  the  damage  caused  by  misbehaving  nodes. 
However,  scalable-gain  misbehavior  should  still  be  a 
primary  focus  for  countermeasures  in  that  its  throughput 
gain  ratio  remains  scalable  before  approaching  the  upper 
bound  that  increases  with  the  increasing  of  NR. 

5.4  Discussions 

In  previous  sections,  we  studied  the  problem  of  quan¬ 
tifying  the  gain  of  backoff  misbehavior  and  further 
presented  experimental  results  to  illustrate  the  impact 
of  backoff  misbehavior.  Our  findings  can  be  summa¬ 
rized  as:  1)  Double-window  misbehavior  has  an  order 
gain  converging  to  a  constant.  The  performance  loss  of 
legitimate  nodes  due  to  double-window  misbehavior  is 
not  significant  in  a  network  with  a  large  number  of 
users.  2)  Fixed-window  misbehavior  has  an  order  gain 
increasing  to  infinity  nodes  regardless  of  the  number 
of  users.  Therefore,  fixed-window  misbehavior  should 
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always  be  the  primary  target  of  countermeasures  to 
backoff  misbehavior.  3)  An  intermittently  misbehaving 
node  can  not  achieve  significant  gain  when  it  chooses 
a  small  6  to  evade  misbehavior  detection.  4)  In  IEEE 
802.11  networks,  backoff  misbehavior  can  be  categorized 
into  two  classes:  finite-gain  misbehavior  and  scalable- 
gain  misbehavior.  Scalable-gain  misbehavior  (e.g.,  fixed- 
window  backoff  misbehavior)  has  throughput  gain  ra¬ 
tio  that  increases  as  the  number  of  legitimate  nodes 
increases;  while  finite-gain  misbehavior  (e.g.,  double¬ 
window  backoff  misbehavior)  always  has  upper-bounded 
throughput  gain  ratio. 

Theoretically,  the  metric  of  order  gain  can  be  used 
to  compare  one  type  of  misbehavior  with  another  to 
show  which  one  is  more  harmful.  Practically,  it  can 
be  used  to  classify  misbehavior  into  either  finite-gain 
or  scalable-gain  misbehavior,  thereby  providing  a  better 
understanding  of  how  a  type  of  misbehavior  can  affect 
the  throughput  in  a  wireless  network.  We  pointed  out 
that  countermeasures  should  focus  more  on  scalable- 
gain  misbehaving  nodes,  whose  throughput  gain  over 
legitimate  nodes  increases  as  the  number  of  nodes  in¬ 
creases.  It  is  also  worthy  of  mention  that  it  may  be 
difficult  to  clearly  identify  whether  a  misbehaving  node 
is  scalable-gain  or  finite-gain  in  a  practical  system.  A 
possible  approach  is  to  develop  a  statistical  detector 
for  particular  scalable-gain  misbehavior,  such  as  fixed- 
window  misbehavior.  Alternatively,  a  heuristic  approach 
can  be  used  in  a  network  to  intentionally  add  a  testing 
node  to  generate  additional  traffic,  if  a  node's  through¬ 
put  exhibits  an  increase,  it  can  be  detected  as  a  scalable- 
gain  misbehavior.  Overall,  an  efficient  and  scalable  de¬ 
tection  approach  is  essential  in  a  large-scale  network. 

6  Conclusions 

In  this  paper,  we  provided  an  in-depth  study  on  the  ben¬ 
efits  of  backoff  misbehaving  nodes  by  analytical  model¬ 
ing,  simulations  and  experiments.  We  introduced  a  new 
performance  metric,  order  gain ,  to  quantitatively  investi¬ 
gate  two  widely-used  continuous  misbehavior  models: 
double-window  and  fixed-window  backoff  misbehaviors, 
and  intermittent  misbehavior  that  performs  misbehavior 
intermittently  to  evade  misbehavior  detection.  Besides 
our  theoretical  quantification  of  the  gains  of  continuous 
and  intermittent  misbehaviors,  we  formally  categorize 
backoff  misbehavior  into  finite-gain  misbehavior  and 
scalable-gain  misbehavior.  We  show  that  double-window 
backoff  misbehavior  belongs  to  finite-gain  misbehavior 
and  has  negligible  impact  on  a  network  with  a  large 
number  of  users ;  fixed-window  backoff  behavior  is  much 
more  harmful  than  others  because  it  has  scalable  gain, 
which  means  its  throughput  gain  ratio  goes  to  infinity 
as  the  number  of  legitimate  nodes  increases  to  infinity. 
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